Who Has Admin/Supervisor or Access Control Rights? 1

[KA5AWP]

Hello All,

We have a rat here and I've been tasked to find him/her! I've run NLIST to find Admin Equivalent users in the tree, but I'm stumped on how to find users that have the Supervisor and/or Access Control bit turned on explicitly on a volume or directory. We've got 1250 users, so it would take a good while to look at the rights of all of them one at a time. Any thoughts?

Rat Killer

 

[donnadee]

Can you find something in common like a file maybe?

You could go into the f: drive and right click on a few files and look at the netware rights to see who has admin rights. Can could speed things up.

You could also go into Netware Administrator and check the various inherited rights.

 

[KA5AWP]

Thanks,

But that will take a while here with 49 servers in 26 cities. Is there a tool within NWAdmin that I'm overlooking or a 3rd party tool to do this a bit more cleanly.

 

[donnadee]

Maybe this?

Find Equiv

http://www.nwconnection.com/resources/wolfgang.shtml

 

[salserocito]

Here ya go... This is the King of all NetWare Security TIDS!

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10024879.htm

It includes all of the NLIST command lines to show the info that you are seeking!

Good Luck!

 

[TheLad]

Have a star my friend, good posting (might be worthy of a FAQ)! -----------------------------------------------------
"It's true, its damn true!"
-----------------------------------------------------

 

[KA5AWP]

That is the one that I needed! Thanks!

 

[salserocito]

Glad I could help!!! Thank you. )

 

[cmills]

I tried to use the NLIST commands as written in the TID,logged in as ADMIN, but I kept getting bad command and filename. I'm on Novell 5.1. switched to DOS prompt on my pc. running win 98.
thanks

 

[salserocito]

Make sure that you are initiating the NLIST commands from the SYS:\LOGIN Directory!!!

Good Luck!

 

[cmills]

Hi,
Yes I am on the sys:\login directory. this is exactly what I typed:

NLIST User SHOW "Require a Password"; and I get bad command or file name. I bet it's something simple. I also did a search of the directory and nothing Nlist*.* exits

 

[TheLad]

NLIST has always been under SYSUBLIC so far as I am aware. Never heard of it being in the LOGIN directory.

Try switching to SYSUBLIC and running your NLIST command from there. -----------------------------------------------------
"It's true, its damn true!"
-----------------------------------------------------

 

[salserocito]

NLIST.EXE is located in two places on the NetWare server...

SYS:\PUBLIC and SYS:\LOGIN\NLS\ENGLISH

Good Luck!